Pump.fun pauses trading after apparent flash loan attack

Pump.fun is “aware” that bonding curve contracts on Pump.fun were exploited, and has since paused trading

article-image

Dall-e modified by Blockworks

share

Pump.fun was attacked Thursday by an exploiter who seemingly used flash loans to buy out the bonding curve. 

In a post on X, Pump.fun said that it was “aware” that the contracts were compromised and were investigating. 

“We have upgraded the contracts so the attacker cannot siphon any more funds. The TVL in the protocol right now is safe,” the team said. “We’ve paused trading — you cannot buy and sell any coins at the moment. Any coins that are currently in the process of migrating to Raydium cannot be traded and will not be migrating for an indefinite period of time.”

Igor Igamberdiev, head of research at Wintermute, analyzed the situation in a series of posts on X, saying that the key was compromised, “though the possibility of an inside job remains.”

Loading Tweet..

Igamberdiev said that the amount lost by Pump.fun is “at least” 12,000 SOL, or roughly $2 million.

An account on X going by Stacc seemed to take credit for the attack, writing “I’m about to change the course of history” in a post

Stacc seemed to imply in his posts that he didn’t intend to keep the stolen funds, but rather planned to transfer the “remaining balances of bonding curves” to some token users. 

Loading Tweet..

It’s not clear as of publication how Stacc was able to execute the attack, or if they’re distributing the balances to random people. 

As Blockworks previously reported, Pump.fun lets developers launch tokens without seed liquidity for a couple of dollars. Its revenue comes from users buying and selling tokens. 

Tokens that exceed market caps of $69,000 can then be listed on the Raydium DEX. 

This is a developing story.


Start your day with top crypto insights from David Canellis and Katherine Ross. Subscribe to the Empire newsletter.

The Lightspeed newsletter is all things Solana, in your inbox, every day. Subscribe to daily Solana news from Jack Kubinec and Jeff Albus.

Tags

Upcoming Events

Salt Lake City, UT

WED - FRI, OCTOBER 9 - 11, 2024

Pack your bags, anon — we’re heading west! Join us in the beautiful Salt Lake City for the third installment of Permissionless. Come for the alpha, stay for the fresh air. Permissionless III promises unforgettable panels, killer networking opportunities, and mountains […]

recent research

Research report cover graphics (4).jpg

Research

Despite crypto gaming related projects and funds raising close to a billion dollars in November 2021, there have been only a handful of games that have attracted users apart from mercenary capital, and have had sustained activity for longer than a few months. Crypto gaming is going through an infrastructure phase. Theoretically, crypto gaming stands to benefit from purpose-built, high throughput chains, where blockspace is cheap (especially for games which are fully onchain). However, despite the launch of many gaming-focused chains, most crypto games are lacking in quality and quantity. Most new crypto gaming infrastructure either have no games or only a few games launched (e.g. Xai) or have failed to garner meaningful attention (e.g. Immutable X).

article-image

Ethereum is becoming a multilayered lasagna-like system, pushing people to the margins with its complexity and fees

article-image

Ether would be set to re-test its 2021 price high should the regulator unexpectedly approve ETH funds, industry watchers say

article-image

The Financial Innovation and Technology for the 21st Century Act, known as the FIT21 Act, is expected to head to the floor for a vote in the House in the afternoon on May 22

article-image

NYAG announced details about its settlement with bankrupt lender Genesis on Monday

article-image

The $948 million of inflows from May 13 to May 17 roughly equaled the net money that left the fund category over the five prior weeks

article-image

A Goldman Sachs alum will take over as CEO in August